Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/143uR_Opu7Zeu7uxf8rhyVqs6pA.roa
File: 143uR_Opu7Zeu7uxf8rhyVqs6pA.roa (raw, json)
Hash identifier: gnOcz10DzYsdv7a3eo6ReHVx6t0LmKA4aY2SFi+8K5g=
Subject key identifier: D7:8D:EE:47:F3:A9:BB:B6:5E:BB:BB:B1:7F:CA:E1:C9:5A:AC:EA:90
Certificate issuer: /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial: 019E3FF4A03218E84AFB25BB3766ADE504D8
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/143uR_Opu7Zeu7uxf8rhyVqs6pA.roa
Signing time: Tue 19 May 2026 11:17:36 +0000
ROA not before: Tue 19 May 2026 11:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207023
IP address blocks: 185.60.202.0/23 maxlen: 23
185.115.64.0/22 maxlen: 22
185.120.8.0/23 maxlen: 23
185.120.10.0/23 maxlen: 23
185.174.90.0/23 maxlen: 23
185.174.91.0/24 maxlen: 24
185.242.92.0/23 maxlen: 23
185.242.94.0/23 maxlen: 23
2a0a:d01::/32 maxlen: 32
2a0a:d02::/32 maxlen: 32
2a0a:d03::/32 maxlen: 32
2a0a:d04::/32 maxlen: 32
2a0a:d05::/32 maxlen: 32
2a0a:d06::/32 maxlen: 32
2a0a:d07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:f4:a0:32:18:e8:4a:fb:25:bb:37:66:ad:e5:04:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Validity
Not Before: May 19 11:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d78dee47f3a9bbb65ebbbbb17fcae1c95aacea90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b3:f6:94:26:6f:ce:13:14:00:12:39:48:bf:
01:37:e3:4c:c2:6e:92:76:59:f3:b1:6d:1e:e9:99:
e9:a1:4b:86:46:77:64:71:a0:65:cd:ba:45:92:46:
c8:35:bf:d7:89:5c:84:75:3d:33:93:d8:36:b9:79:
48:2c:d4:d7:cf:19:3c:72:c7:95:0d:a6:fb:2f:be:
16:5b:a5:90:56:43:25:ef:c1:f2:a2:de:4c:28:3f:
c7:ee:3d:e9:b8:b6:3e:fa:fd:b7:a6:93:12:87:88:
cb:06:79:6d:2b:b6:cb:80:40:e1:d4:ac:57:1e:aa:
d1:ae:7f:87:bc:b7:c0:36:f8:e6:2b:e5:49:1c:0b:
d4:89:31:b5:28:f0:db:ac:26:df:3f:85:94:46:1a:
e5:e4:ab:81:99:ec:6d:e8:b6:11:08:c5:38:ad:1d:
60:ff:be:73:34:33:a9:26:e6:96:13:6d:f3:a1:6f:
cc:a4:c0:3a:ac:66:8b:4b:65:68:c7:a4:ad:8b:d6:
66:fa:39:87:57:4c:63:44:b3:bf:3a:ee:2e:dd:cc:
41:95:fb:ea:68:56:e4:19:3b:1f:39:09:d8:12:4d:
b5:6e:52:6f:42:47:70:22:2c:d0:e0:71:02:e3:cf:
d6:08:17:af:8b:b6:16:31:fd:22:26:b9:ab:46:63:
8b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8D:EE:47:F3:A9:BB:B6:5E:BB:BB:B1:7F:CA:E1:C9:5A:AC:EA:90
X509v3 Authority Key Identifier:
keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/143uR_Opu7Zeu7uxf8rhyVqs6pA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.202.0/23
185.115.64.0/22
185.120.8.0/22
185.174.90.0/23
185.242.92.0/22
IPv6:
2a0a:d01::-2a0a:d07:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5e:ad:7b:dc:1f:18:ac:02:7a:ff:14:a0:b6:86:16:e8:49:1d:
86:b1:96:53:c7:f6:9a:41:ac:0a:79:13:4c:06:5a:1a:e1:29:
e5:b6:07:67:99:ec:ce:56:ef:71:5b:23:8e:e2:1a:07:d0:6c:
45:76:15:6e:5e:13:b2:51:1b:c2:4a:4f:23:c0:2a:44:5c:b8:
b9:6f:3e:65:9d:44:39:67:bc:a3:4a:e6:43:35:66:a9:9b:43:
a1:9e:20:88:ed:6f:82:66:b7:e1:db:f3:44:d9:6b:4a:4e:f8:
f9:09:98:3b:69:95:9a:6a:35:ab:a2:c1:eb:e6:91:2a:74:af:
0a:38:6e:71:8e:2b:18:ec:70:34:69:88:6e:1b:4d:12:62:ae:
e1:a2:50:ed:ae:5b:a7:9e:61:d9:72:71:05:bd:bf:b1:1e:02:
c2:53:fe:7d:cb:56:b6:fc:ee:12:da:35:15:55:65:ee:9c:93:
c7:dd:5f:b0:04:e3:10:53:11:4d:ca:a3:94:11:95:a5:a5:9e:
bc:46:4b:7b:89:89:fa:72:81:12:c2:4b:99:5e:e6:4d:a5:dd:
9d:e6:3f:31:b3:21:38:34:ef:7f:ae:5a:99:d8:46:d4:2f:46:
6d:0c:e5:37:4c:3c:a6:9e:06:e2:4e:26:5e:32:e1:7e:e9:1c:
66:1a:10:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:04:00 2026 by rpki-client